US7058711B2 - Virtual network management - Google Patents

Abstract

A system providing for virtual network management is disclosed. A system in accordance with the present invention allows a service provider to remotely manage one or more client network management systems. The security of the client network management systems is advanced by only allowing communications between a client network management system and the service provider that have been initiated by the client network management system. A mirror image of a client network management system is maintained by the service provider as a virtual network management system. Data included in the virtual network management system is periodically updated with data received from the client network management system. Instructions or data may be passed from the service provider to the client network management system in reply to communications initiated by the client network management system. The present invention is particularly useful in connection with the remote management of client networks with respect to which security is a concern.

Description

FIELD OF THE INVENTION

The present invention relates to virtual network management. In particular, the present invention relates to managing client networks from a remote location.

BACKGROUND OF THE INVENTION

Computer networks are vital to the operation of many business enterprises. Such networks include interconnected computers, telecommunications systems, or converged environments in which voice and data are passed across a common network. Because such networks provide functions that are critical to the operation of business enterprises, their maintenance is of considerable importance.

In order to maintain and troubleshoot networks, outside service providers may be employed. If outside service providers are provided access to the client network, many maintenance and repair operations can be performed remotely. However, remote access to a client network is often undesirable from the perspective of the client, as the access channel provided for the service provider can be exploited by third parties. For example, modem access in connection with software, such as PC ANYWHERE, that allows for the remote operation of computer systems, can potentially be exploited by unauthorized persons to access the client network.

In order to address client concerns regarding network security, virtual private networks, firewalls, and password protection has been utilized. However, such solutions can add expense to the operation of a network, and have certain vulnerabilities.

SUMMARY OF THE INVENTION

The present invention is directed to solving these and other problems and disadvantages of the prior art. Generally, according to the present invention, a client network management system is interconnected to a communication network, such as the Internet. According to the present invention, the client network management system may contact a service provider network management system over the communication network to post various types of information. In reply to the posting, the service provider network management system can request additional data, or provide updated configuration information, code, or both updated configuration information and code to the customer network management system. The service provider network management system cannot initiate communications with the client network management system. Accordingly, the client network management system controls whether communications are initiated with the service provider network management system.

In accordance with an embodiment of the present invention, the service provider network management system maintains a virtual database, that mirrors the information concerning the operation of the client network management system stored on a client network management system database. In this way, the service provider network management system is capable of establishing a virtual copy of the client network management system. The establishment of a virtual network management system allows the service provider to appropriately manage the client network management system, to troubleshoot hardware and software related problems on the client system, and to repair software related problems on the client system, without requiring access to the actual client network management system in real time.

These and other advantages and features of the invention will become more apparent from the following description of an illustrative embodiment of the invention taken together with the drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of client networks interconnected to a service provider network management system in accordance with an embodiment of the present invention;

FIG. 2 is a block diagram of a client network in accordance with an embodiment of the present invention;

FIG. 3 is a functional block diagram illustrating a client network management system in accordance with an embodiment illustrating the present invention;

FIG. 4 is a functional block diagram of a service provider virtual network management system in accordance with an embodiment of the present invention; and

FIG. 5 is a flow chart illustrating the operation of a remote network management system in accordance with an embodiment of the present invention.

DETAILED DESCRIPTION

With reference now toFIG. 1, a remotenetwork management system100 in accordance with an embodiment of the present invention is illustrated. Thesystem100 generally includes a service providernetwork management system104 interconnected to one or more client networks (or switches)108 by acommunication network112. In general, the service providernetwork management system104 may be implemented using one or more general purpose computers. Theclient network108 may comprise any voice and/or data network. For example, theclient network108 may comprise a private branch exchange (PBX). In the embodiment of the remotenetwork management system100 illustrated inFIG. 1, thecommunication network112 comprises the Internet. In addition or as an alternative, thecommunication network112 may comprise a switched circuit network, such as the public switched telephone network (PSTN), a private intranet, or another communications system.

For each of theclient networks108, a virtualnetwork management system116 is established on the service providernetwork management system104. The establishment of virtualnetwork management systems116 on the service providernetwork management system104 allows the service provider to remotely manageclient networks108, even in the absence of real time access to theclient networks108.

InFIG. 2, aclient network108 is illustrated in block diagram form. As shown inFIG. 2, aclient network108 in accordance with the present invention includes a clientnetwork management system204 interconnected to thecommunication network112, for communicating with the service providernetwork management system104. In addition, theclient network108 includes acommunications server208. Thecommunications server208 may control and facilitate communications between nodes on theclient network108. Thecommunications server208 may also provide interfaces to interconnect theclient network108 to communications networks, including thecommunication network112. For example, inFIG. 2, thecommunications server208 is illustrated as interconnecting theclient network108 to both thecommunication network112 used to interconnect thenetwork management system204 to the service providernetwork management system104, and to the public switched telephone network (PSTN)212. Accordingly, thecommunications server208 may facilitate communications between communication nodes associated with theclient network108 and communication nodes located outside of theclient network108.

Examples of communication nodes that may be associated with theclient network108 include client computers216 and desk telephones220. Accordingly, it can be appreciated that theclient network108 may comprise a data network, a voice network, or a combined voice and data network. As a further example, it should be appreciated that theclient network108 may comprise a private branch exchange (PPX) telephony network. The various components that may be associated with the client network108 (e.g., the clientnetwork management system204, thecommunications server208, the client computers216, and the desk telephones220) may be interconnected to one another by alocal communication network224, such as a local area network (LAN).

Thecommunications server208 may include basic communications functions, including telecommunications functions such as voice messaging and other telephony features. Thecommunications server208 may also include an interface with thePSTN212 and an interface with thecommunication network112. The communications server may comprise a general purpose computer. Where theclient network108 comprises a PBX, thecommunications server208 may comprise a Definity Server available from Avaya, Inc. The client computers216 may include general purpose computers, such as personal computers. In addition, the client computers216 may include devices such as personal digital assistants (PDAs) and other computing devices, including devices capable of implementing soft telephones. The desk telephones220 may comprise dedicated Internet protocol (IP) telephones. In addition to wire line connections, it should be appreciated that thelocal communication network224 may comprise wireless interconnections with the various components of theclient network108, such as the client computers216 and the desk telephones220.

With reference now toFIG. 3, major functional components of a clientnetwork management system204 in accordance with an embodiment of the present invention are illustrated. In general, the clientnetwork management system204 includes avirtual data server304, which serves to interconnect the clientnetwork management system204 to the service provider network management system104 (seeFIG. 1) across thecommunication network112. In addition, thevirtual data server304 initiates contact with the service providernetwork management system104 according to a predetermined schedule, or in response to the collection of certain data concerning theclient network108 with which thevirtual data server304 is associated. For example, if a particular number of faults of a certain type are observed, thevirtual data server304 may autonomously initiate an unscheduled communication with the service providernetwork management system104.

The clientnetwork management system204 may additionally include one or more data collectors308. In general, the data collectors308 each collect a particular type of data concerning theclient network108. For example, afirst data collector308amay collection information regarding the current configuration of theclient network108. Asecond data collector308bmay collect information regarding one or more performance parameters concerning theclient network108. As a further example, athird data collector308nmay collect information regarding general or specific faults detected in connection with theclient network108. Accordingly, it can be appreciated that a data collector308 may be established for each category or type of information concerning the client network308 for which monitoring is desired.

Thedata scheduler312 may be used to determine when data is collected by the data collectors308 established in connection with theclient network108. For example, thefirst data collector308ain the present example may be scheduled by thedata scheduler312 to collect current configuration information hourly or whenever the configuration of theclient network108 has been altered. As a further example, thesecond data collector308bmay be scheduled by thedata scheduler312 to collect performance information every half hour. As still a further example, thethird data collector308nmay be instructed by thedata scheduler312 to continuously monitor theclient network108 for faults.

One or more registered graphical user interfaces (GUIs)316 may be provided to allow a local administrator or administrators to configure various aspects of the operation of theclient network108. For example, a registered GUI client316 may be used by an administrator to indicate to a data collector308 the internet protocol (IP) address of the switch (i.e. the client network108) for which data is being collected. In addition, a registered GUI client316 may be used to assign local network addresses or extensions to devices (e.g., client computers216 and desk telephones220) associated with theclient network108.

Adatabase320 may be provided for storing various information used by theclient network108. For example, thedatabase320 may serve as a repository for data collected by the various data collectors308. In addition, thedatabase320 may serve as a repository for various configuration information concerning theclient network108.

With reference now toFIG. 4, the major functional components of a service providernetwork management system104, and in particular of a virtualnetwork management system116, in accordance with an embodiment of the present invention are illustrated. In general, the virtualnetwork management system116 includes avirtual request server404. Thevirtual request server404 receives communications from the virtual data server304 (seeFIG. 3) of the clientnetwork management system204 transmitted over thecommunication network112. Thevirtual request server404 formulates replies to the communications received from thevirtual data server304. For instance, thevirtual request server404 may reply to communications from the clientnetwork management system204 that contain information regarding faults occurring on theclient network108 with a request that certain diagnostic procedures be executed by thenetwork management system204, and that the results of the testing be provided to the service providernetwork management system104 in a later communication.

Avirtual data manager408 mirrors thevirtual data server304 of the client network management system. In general, thevirtual data manager408 receives data sent from the clientnetwork management system204, and stores that data in avirtual database412.

Avirtual data notifier416 may issue alerts, or initiate some other notification procedure in response to faults or other conditions detected in connection with theclient network108 received from the clientnetwork management system204. For example, thevirtual data notifier416 may sound an alarm or page a technician when a condition requiring immediate attention is detected.

Agraphical user interface420 may be used by a technician or technicians at the service provider to diagnose fault conditions or to otherwise take action to maintain or repair aclient network108 remotely. In particular, from the data received according to scheduled reports or in response to requests from thevirtual request server404 that is placed in thevirtual database412 by thevirtual data manager408, a technician has access to a virtual or mirrored copy of the clientnetwork management system204. Accordingly, the service providernetwork management system104 comprises a virtualnetwork management system116. Furthermore, a virtualnetwork management system116 may be established on a service providernetwork management system104 for eachclient network108 managed by a service provider.

With reference now toFIG. 5, the operation of an embodiment of a remotenetwork management system100 in accordance with an embodiment of the present invention is illustrated. Initially, atstep500, the clientnetwork management system204 associated with aclient network108 initiates communication with the service provider'snetwork management system104, and in particular with the virtualnetwork management system116 associated with that clientnetwork management system204 of theclient network108. It should be appreciated that, according to the present invention, communication sessions between the clientnetwork management system204 and the virtualnetwork management system116 are always initiated by the clientnetwork management system204. That is, although a virtualnetwork management system116 may request certain information from the clientnetwork management system204, such requests are made in the context of a response to a communication from the clientnetwork management system204.

Atstep504, data from the clientnetwork management system204 is posted to the virtualnetwork management system116. The data may include data routinely collected by the clientnetwork management system204. In addition or alternatively, the data may include information that was requested by the virtualnetwork management system116 as part of a response to an earlier clientnetwork management system104 initiated communication.

Atstep508, the virtualnetwork management system104 determines whether it is holding data or instructions for transmission to the clientnetwork management system204. If data or instructions for the clientnetwork management system204 are being held by the virtualnetwork management system116, the data or instruction is transmitted to the client network management system as part of the acknowledgment of the communication initiated by the client (step512). An example of data that may be provided from the virtualnetwork management system116 to the clientnetwork management system204 includes revised configuration data, such as changes in the dialing plan used by theclient network108. An example of instructions provided from the virtualnetwork management system116 to the clientnetwork management system204 includes instructions to test an aspect of the operation of theclient network108 and return the results of that testing. If the data or instruction transmitted to the clientnetwork management system204 includes a request for additional data from the client network management system204 (step516) the system returns to step504, during which step additional data from the clientnetwork management system204 is posted to the service provider virtualnetwork management system104.

If atstep516 the data or instruction transmitted as part of the acknowledgment does not include a request for additional data, the data transfer sequence is ended (step520). It should be appreciated that, in response to a request for additional data from the client network management system204 (step516), the clientnetwork management system204 may acknowledge the request and terminate the data transfer sequence. The requested data may then be provided to the service providernetwork management system104 in a later communication initiated by the clientnetwork management system204.

If atstep508 it is determined that the service providernetwork management system104 is not holding data or instructions for the clientnetwork management system204, the communication from the clientnetwork management system204 is acknowledged (step524) and the data transfer sequence then ends (step520).

The communications between the clientnetwork management system204 and the virtual network management system may be according to the protocol or protocols required by the communication network. For example, the communications may be according to the HTTPS protocol where a Server Socket Layer (SSL) encryption session is used in connection with communications conducted over acommunication network112 that comprises the Internet.

From the above description, it can be appreciated that a remotenetwork management system100 in accordance with the present invention provides a virtualnetwork management system116 for each clientnetwork management system204 administered by the service provider. Accordingly, by providing, for example, a Web address allowing contact from clientcontact management systems204, a service provider may remotely manage a number ofclient networks108 from a service providernetwork management system104 that is remote with respect to the client networks108.

In addition, it should be appreciated that a remotenetwork management system100 in accordance with an embodiment of the present invention does not allow for communication sequences that are initiated by the service provider. Instead, communications sequences are initiated by the clientnetwork management system204. Accordingly, the present invention may provide for the remote management ofclient networks108, without requiring additional hardware, such as virtual private network routers, and without requiring that theclient network108 accept communications initiated by a system external to theclient network108.

The foregoing discussion of the invention has been presented for purposes of illustration and description. Further, the description is not intended to limit the invention to the form disclosed herein. Consequently, variations and modifications commensurate with the above teachings, within the skill and knowledge of the relevant art, are within the scope of the present invention. The embodiments described hereinabove are further intended to explain the best mode presently known of practicing the invention and to enable others skilled in the art to utilize the invention in such or in other embodiments and with various modifications required by their particular application or use of the invention. It is intended that the appended claims be construed to include the alternative embodiments to the extent permitted by the prior art.

Claims (16)

1. A method for remotely managing a network, comprising:

providing a first client network comprising a first client network management system;

providing a second client network comprising a second client network management system;

providing a service provider network management system, wherein said service provider network management system is provided with an address of said first client network management system and an address of said second client network management system;

providing a communication link between said first client network management system and said service provider network management system;

providing a communication link between said second client network management system and said service provider network management system;

in response to said first client network management system initiating a communication addressed to said service provider network management system, wherein said service provider network management system cannot initiate communications with said first client network, wherein communications from said service provider network management system to said first client network management system are only completed as part of a response to a communication initiated by said first client network management system, and wherein said communication addressed to said service provider network management system is formatted according to an Internet protocol; the step of:

establishing at least a first virtual network management system on said service provider network management system, wherein said first virtual network management system comprises a database that mirrors said first client network management system, and wherein a technician using said service provider network management system can manage said first client network without having real time access to said first client network; and

in response to said second client network management system initiating a communication addressed to said service provider network management system, wherein said service provider network management system cannot initiate communications with said second client network, wherein communications from said service provider network management system to said second client network management system are only completed as part of a response to a communication initiated by said second client network management system, and wherein said communication addressed to said service provider network management system is formatted according to an Internet protocol; the step of:

establishing at least a second virtual network management system on said service provider network management system, wherein said second virtual network management system comprises a database that mirrors said second client network management system, and wherein a technician using said service provider network management system can manage said second client network without having real time access to said second client network.

2. The method ofclaim 1, further comprising:

generating in said service provider network management system an acknowledgment of said communication, wherein said acknowledgement comprises at least one of a request for data and data for use by said client network.

3. The method ofclaim 1, wherein said Internet protocol comprises HTTPS.

4. The method ofclaim 1, wherein said first client network comprises a virtual private network.

5. The method ofclaim 1, wherein said first client network comprises a private branch exchange.

6. A system for remotely managing a network, comprising:

a first client network, comprising:

a first plurality of communication nodes;

a communication link interconnecting said nodes;

a first client server;

a first client network management system;

a second client network, comprising:

a second plurality of communication nodes;

a communication link interconnecting said nodes;

a second client server;

a second client network management system;

a service provider network management system, comprising:

a first virtual database including a mirrored copy of said first client network management system of said first client network, wherein said first virtual database is established in response to said first client network management system initiating a communication addressed to said service provider network management system, wherein a technician using said service provider network management system can access said first virtual database to manage said first client network without having real time access to said first client network;

a second virtual database including a mirrored copy of said second client network management system of said second client network wherein said second virtual database is established in response to said second client network management system initiating a communication addressed to said provider network management system, wherein a technician using said service provider network management system can access said second virtual database to manage said second client network without having real time access to said first client network;

a communication network interconnecting said first and second client networks and said service provider network, wherein communication between said first and second client networks and said service provider network may be initiated by one of said client networks and may not be initiated by said service provider network, and wherein said communication between one of said client networks and said service provider network is formatted according to an Internet protocol.

7. The system ofclaim 6, wherein at least a first of said communication nodes comprises a telephone.

8. The system ofclaim 6, wherein said first client network comprises a private branch exchange communications network.

9. The system ofclaim 6, wherein said client server of said first client network stores configuration information regarding said first client network.

10. The system ofclaim 9, wherein said configuration information can be at least one of altered and replaced with configuration information received from said service provider network management system in response to a communication initiated by one of said first and second client networks.

11. The system ofclaim 6, wherein said communication link comprises an Internet protocol communication link.

12. A method for remotely managing a client network from a service provider network management system, comprising:

receiving at said service provider network a first communication formatted according to an Internet protocol from a first client network management system;

generating a response to said first communication, wherein said response comprises at least one of substantive information related to operational aspects of a first client network obtained from a first virtual network management system related to said first client network management system and a request for data for inclusion in said first virtual network management system, and wherein a communication initiated by said service provider and addressed to said first client network that is other than a response to a communication from said first client network management system will not receive a response from said first client network;

receiving at said service provider network a second communication formatted according to an Internet protocol from a second client network management system;

generating a response to said second communication, wherein said response comprises at least one of substantive information related to operational aspects of a second client network obtained from a second virtual network management system related to said second client network management system and a request for data for inclusion in said second virtual network management system, and wherein a communication initiated by said service provider and addressed to said second client network that is other than a response to a communication from said second client network management system will not receive a response from said second client network.

13. The method ofclaim 12, wherein said substantive information comprises at least one of data, a request for data, and network administration information.

14. The method ofclaim 12, wherein said virtual client network comprises substantive information related to operational aspects of at least a first client network.

15. The method ofclaim 12, wherein said second communication comprises substantive information related to operational aspects of said client network.

16. The method ofclaim 12, wherein said Internet protocol comprises HTTPS.

Images